PyInit_main
Behavioral task
behavioral1
Sample
68424c0013455df9b62f0ac90b7472e4e48d25d6daedf45c7e96cab449a09d2f.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
68424c0013455df9b62f0ac90b7472e4e48d25d6daedf45c7e96cab449a09d2f.dll
Resource
win10v2004-20230915-en
General
-
Target
68424c0013455df9b62f0ac90b7472e4e48d25d6daedf45c7e96cab449a09d2f
-
Size
128KB
-
MD5
9e598456f0b3e09dcaeb57a2f4cf6e7c
-
SHA1
edbe162d6f0a423a60c358272d3eee6cda35c2eb
-
SHA256
68424c0013455df9b62f0ac90b7472e4e48d25d6daedf45c7e96cab449a09d2f
-
SHA512
0de5231d35e946705563ddbda123990d2181401b97d438ad0d4249c8acb2cb4d9a35d157abf5f7cd0044b2ab756135bc075007022d0c3bbb3a868a55ab714e68
-
SSDEEP
3072:+SO6QvPaDam2NSHutpgrBxlHg6yIkSf+wsuqmC6C4i:+/vbDSDmJfRt
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 68424c0013455df9b62f0ac90b7472e4e48d25d6daedf45c7e96cab449a09d2f
Files
-
68424c0013455df9b62f0ac90b7472e4e48d25d6daedf45c7e96cab449a09d2f.dll windows:6 windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: - Virtual size: 292KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 126KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE